Exporting gssapi context, take two
kwc at citi.umich.edu
Tue Apr 27 17:18:10 EDT 2004
> >>>>> "Kevin" == Kevin Coffman <kwc at citi.umich.edu> writes:
> Kevin> Any suggestions for a cleaner/clearer approach?
> Have a glue cred_t that can easily be distinguished from a mechanism
> cred_t. Have the mech specific function decide whether it is a glue
> cred and call a routine in the glue layer to coerce the cred to the
> right type.
> You'll also need to discuss in this forum how we want to deal with
> calling mechanism specific functions in a glue environment.
> Adding the mechanism-specific functions to the glue layer is clearly
> the wrong answer though.
I understand (and can agree with) your aversion to putting this
in the glue layer, but aren't you asking for a standardized glue api
I'm sure you don't want code that is dependent on a specific glue
implementation in the MIT gssapi code? This doesn't make it right,
but there is already a pname_to_uid function in the mechglue code.
More information about the krbdev